IT Security Manager
Tandym Group · Plainsboro, NJ · 3 wk ago
HybridContract
About the role
Shift: Day. Schedule: Monday to Friday. Hours: Standard business. Setting: Hybrid (at least 2 days a week onsite).
Responsibilities
- Lead third-party cyber risk management activities, including security assessments, controls, and risk tracking
- Develop and maintain security standards, documentation, metrics, and reporting for vendor-related risk
- Support audit planning and execution, including assurance reviews and audit calendars
- Collaborate with Procurement, Legal, Privacy, Compliance, and QA partners to align security requirements
- Monitor supplier risk trends and contribute to security improvement roadmaps and remediation efforts
Qualifications
- At least 5 years of experience in Third-Party Cyber Risk Management, Information Security, or Risk Management
- Bachelor's degree in Computer Science, MIS, or a related field, or an equivalent combination of relevant experience and training
- Certified CISA, CRISC, CISM, CISSP, or a relevant certification
- Experience with Security and Risk Management frameworks and regulations, such as ISO, NIST, GDPR, SOX, HIPAA, FISMA, and GxP
- Experience with GRC tools, such as ServiceNow, Galvanize, Vanta, MetricStream, Archer, or WolfPAC
Skills
- Experience in a pharmaceutical, biotech, or healthcare environment
- Strong understanding of vendor management processes and assurance frameworks, including SOC 1 and SOC 2 audits
- Experience working in multinational organizations and global virtual teams
- Strong business acumen and stakeholder communication skills
- Experience developing audit roadmaps, dashboards, and key risk indicators